Comply with ‘Data Protection Act’ or face the law – Data Commission to organizations

Listen to this article Getting your Trinity Audio player ready...

Non-compliant Data Controllers/business organizations will soon be in hot waters as Ghana’s Data Protection Commission has begun aggressive enforcement of the Data Protection Act 2012 (Act 843) this month of August 2023.

This became necessary after the Ghana Data Commission noticed that most business organizations in the country are not abiding by the Data Protection Act to ensure that the information of their customers is well secured without privacy breaches.

The Data Protection Act outlines what constitutes lawful processing, exempt processing, and the scope and duties of data controllers, data processors, the Data Commissioner, and data subjects.

It balances the need to ensure privacy rights with the rights of the State to remain inviolable, maintain law and order, function effectively, and protect its citizens effectively.

The Chief Executive Officer (CEO) of Information Governance Solutions (IGS), Sylvia Appiah, in light of this, has admonished data controllers and business organizations to prioritize fulfilling data protection requirements to avoid incurring losses.

According to Sylvia Appiah, for business organizations to thrive, there is a need to acquire the requisite skills in managing and protecting the information of customers.

The CEO of Information Governance Solutions called on organizations to reach out to her outfit for the training of practitioners and registration in data protection because they have been certified by the Data Commission in Ghana.

“In data compliance, the first thing to do is to register and we [Information Governance Solutions] can help you go through the process to ensure the data is secured and transferred in the appropriate manner.

“I will urge all controllers to contact us and register the information to start the journey of compliance. Data protection agents are in shortage globally. So in conjunction with the data protection commission, we offer certified practitioner training to organizations. We also offer data protection supervisors where we train them with the needed skills for data protection supervision,” she said.

Sylvia Appiah further stressed the significance of Data protection in organizations and how it contributes to the success of their goals.

“Data Protection is a law that is meant to protect every individual and therefore cannot be over-stressed that any business or country cannot exist without data protection. Every organization needs information about customers, clients, members, and patients in the hospital, and therefore the information given to the organization is paramount,” Sylvia Appiah added.

Source: Ghanaweb